Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/562502c3-3196-3f5e-85de-ebc085ba3219.roa
File:                     562502c3-3196-3f5e-85de-ebc085ba3219.roa (raw, json)
Hash identifier:          pv33HlZHD40lF3uhGQ0YGoPE2v+xh1yw2Qx9M7G1DlU=
Subject key identifier:   31:13:A7:B9:AB:74:A8:63:E6:B4:68:7A:A7:60:E3:D8:82:3F:FF:B3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A323397F132A75C2EB680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/562502c3-3196-3f5e-85de-ebc085ba3219.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        24.106.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:32:33:97:f1:32:a7:5c:2e:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=34d75c31-08a9-466a-9e74-99d99edc609c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:21:8c:bd:81:7e:31:76:31:0f:82:10:f8:ff:
                    85:dd:3c:66:cc:c9:d7:75:14:f0:b8:92:36:00:b2:
                    5c:bc:ac:c6:5f:4f:cf:3f:33:19:71:6f:75:88:30:
                    1c:32:60:2c:04:34:a8:1d:2d:72:40:33:da:9a:f4:
                    61:41:3b:3e:2f:0a:71:5f:46:f1:b1:86:d1:96:d4:
                    9b:6b:1b:dc:52:2d:0b:eb:93:1a:c6:a7:24:3d:f8:
                    14:c7:e0:08:b1:2e:20:4e:5d:33:70:e2:41:34:16:
                    38:17:e9:5f:fe:c8:4c:e6:5f:fe:f5:b1:29:b2:ff:
                    9c:d6:ad:b5:92:20:4e:9a:ec:cf:66:cb:10:5e:e0:
                    9d:41:42:b0:f2:a9:3d:32:ee:36:ef:4c:8d:58:3b:
                    b8:a1:ba:3b:5d:9c:9c:e1:ea:ed:fe:ef:27:ed:65:
                    14:2f:4e:3a:03:77:5a:e4:9c:d4:e6:a1:c0:6c:21:
                    2b:76:c3:13:d4:fc:7e:35:c2:7c:f0:0e:82:c3:5a:
                    80:0a:a6:5e:09:29:03:bc:a3:80:3d:5a:de:d9:4c:
                    b2:09:04:99:db:66:96:e1:cc:c8:a5:37:18:4c:e5:
                    25:67:b5:25:5e:59:09:a7:61:e2:ff:a2:45:c7:af:
                    56:84:21:89:77:b4:c0:05:63:fd:4f:29:2c:08:fd:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:13:A7:B9:AB:74:A8:63:E6:B4:68:7A:A7:60:E3:D8:82:3F:FF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/562502c3-3196-3f5e-85de-ebc085ba3219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.106.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:36:1c:89:86:4b:ee:9f:74:7a:5c:76:d6:80:0b:95:58:57:
         79:8f:12:d3:a4:34:62:4a:16:d7:f3:25:0e:eb:66:79:d3:18:
         6f:9c:70:dd:53:4a:89:7d:85:d7:99:62:31:8d:18:59:3b:21:
         7c:af:e4:b0:fd:4c:21:6f:5f:0b:db:35:f3:8c:d8:2f:d9:94:
         0c:9b:df:3e:27:6f:ad:67:54:1e:2b:47:49:6a:6a:68:aa:37:
         0f:2d:ed:15:56:d4:c5:d8:ff:de:3f:58:c7:00:f0:b6:c2:95:
         3f:3a:39:95:62:72:f0:6b:63:ad:30:33:c8:6e:3e:a5:1c:2e:
         05:bb:8c:97:d6:af:b2:db:d3:51:b7:09:7e:0b:95:f2:ff:07:
         65:46:6e:fa:e1:db:b3:3d:2c:32:ba:ac:45:5f:e2:2a:1b:39:
         1a:6c:4b:19:99:48:97:61:c7:5c:55:df:35:e4:6a:16:19:21:
         dc:8c:3f:d7:d0:f3:3b:6a:d1:b6:91:59:4c:dd:6e:51:e1:81:
         e6:aa:9a:30:1c:45:18:12:c7:75:e9:26:3f:21:73:4c:a7:dc:
         bc:b7:63:fd:a1:b6:77:3e:a6:aa:d8:e4:c9:73:10:58:a7:6b:
         05:35:e3:37:80:17:63:14:c4:df:d7:67:5b:ee:75:35:9e:db:
         68:9e:d3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:01:56 2025 by rpki-client